This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/DC8SJH5_S25huCWo_66mywrBIJ4.roa File: DC8SJH5_S25huCWo_66mywrBIJ4.roa (raw, json) Hash identifier: qxjuP39ZF5EXI81m6MMw+eFb+tnSpADKVf53l4HgN+g= Subject key identifier: 0C:2F:12:24:7E:7F:4B:6E:61:B8:25:A8:FF:AE:A6:CB:0A:C1:20:9E Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Certificate serial: 019B7758DEB8C25BB54B78E80DF5A21F8EA2 Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/DC8SJH5_S25huCWo_66mywrBIJ4.roa Signing time: Thu 01 Jan 2026 02:17:51 +0000 ROA not before: Thu 01 Jan 2026 02:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12676 IP address blocks: 2.58.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:de:b8:c2:5b:b5:4b:78:e8:0d:f5:a2:1f:8e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb Validity Not Before: Jan 1 02:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c2f12247e7f4b6e61b825a8ffaea6cb0ac1209e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:2f:ac:e6:fd:6d:f0:eb:56:94:6c:5d:5d: f6:d7:3d:a1:3c:bf:5e:61:41:83:4a:4a:d7:5b:e4: 89:81:d2:bd:4f:2d:66:ec:90:21:63:42:45:e2:98: 7f:74:80:1f:cf:8b:b0:e2:ab:89:f2:08:6e:e7:25: 99:75:33:68:7d:87:55:94:0f:12:9d:26:94:a8:93: c4:45:32:af:05:6b:c9:a3:17:59:5a:4c:0e:99:21: c4:0e:87:56:10:62:4a:16:fa:ca:f2:de:1d:72:78: fa:d0:fb:4b:5e:af:92:8e:18:7b:d7:8e:2e:12:ee: d1:1e:81:36:bd:bf:77:51:c5:ab:3b:0f:13:3e:65: a8:47:aa:81:2a:28:ec:71:35:7e:2a:14:61:3d:2e: 18:06:26:6a:b0:c9:82:a7:0f:9e:6f:c8:b4:88:97: f2:18:e4:78:c5:e6:04:d3:c0:2f:32:73:24:b7:ff: c9:6a:f3:a7:2d:d4:9f:b8:c6:12:f7:7b:4a:7f:84: 5b:12:16:6f:32:3d:64:f8:d3:28:4f:7e:3c:4f:18: 80:a8:d5:c7:a5:b0:f1:af:4a:6a:fb:c0:c1:d7:93: 63:bb:6f:5d:d2:a3:e7:21:45:2d:de:c5:73:0e:44: cc:08:4d:d7:fb:db:d9:08:db:aa:62:c1:dc:a5:07: dd:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2F:12:24:7E:7F:4B:6E:61:B8:25:A8:FF:AE:A6:CB:0A:C1:20:9E X509v3 Authority Key Identifier: keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/DC8SJH5_S25huCWo_66mywrBIJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.54.0/24 Signature Algorithm: sha256WithRSAEncryption 11:62:e3:75:fe:6b:dd:27:a1:7e:1b:5a:8e:e9:af:4d:e4:f4: ce:9e:a7:6c:d4:12:84:83:50:0c:28:3c:6a:4c:00:5c:20:55: 0c:d2:7a:78:00:88:4f:fe:8c:46:53:2e:a1:69:8b:77:89:5c: 71:20:3c:89:9c:df:1e:a0:3a:67:bc:84:77:6e:ff:d4:d7:ca: 5f:5c:13:19:01:0f:68:46:6e:08:4d:9f:2d:c5:16:99:66:dc: f1:e5:c3:d0:e8:3a:8d:99:b3:ed:16:27:37:83:94:b8:be:fa: 79:b3:7d:f0:1f:81:15:a1:a3:97:c6:fd:57:b2:d4:3a:23:c5: f4:bf:dc:70:1d:95:44:05:5c:23:f7:63:07:9c:e0:61:20:99: a5:2d:04:8e:39:e7:3e:05:eb:96:41:e6:b0:0f:e2:33:9d:0b: 1f:b9:e1:23:9a:41:65:27:ee:af:b4:ea:43:b3:e4:d7:8d:d5: 6a:04:f8:23:5f:70:cd:64:b6:5d:c8:6e:d6:09:f0:ae:07:6d: 5e:7c:36:39:64:1d:8a:3f:87:21:55:4a:8b:c3:10:eb:7f:a8: 7b:fd:99:2b:04:82:3c:10:05:fa:83:8e:98:8d:9e:24:6c:94: f5:de:ed:77:6e:fe:fa:83:92:e1:0a:df:59:8f:27:ae:8e:7f: 3e:76:df:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WN64wlu1S3joDfWiH46iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi MGZhZGIwHhcNMjYwMTAxMDIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzJmMTIyNDdlN2Y0YjZlNjFiODI1YThmZmFlYTZjYjBhYzEyMDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOYvrOb9bfDrVpRsXV321z2hPL9e YUGDSkrXW+SJgdK9Ty1m7JAhY0JF4ph/dIAfz4uw4quJ8ghu5yWZdTNofYdVlA8S nSaUqJPERTKvBWvJoxdZWkwOmSHEDodWEGJKFvrK8t4dcnj60PtLXq+Sjhh7144u Eu7RHoE2vb93UcWrOw8TPmWoR6qBKijscTV+KhRhPS4YBiZqsMmCpw+eb8i0iJfy GOR4xeYE08AvMnMkt//JavOnLdSfuMYS93tKf4RbEhZvMj1k+NMoT348TxiAqNXH pbDxr0pq+8DB15Nju29d0qPnIUUt3sVzDkTMCE3X+9vZCNuqYsHcpQfdywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAwvEiR+f0tuYbglqP+upssKwSCeMB8GA1UdIwQY MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt NThiMzhmNWFjODBiLzEvREM4U0pINV9TMjVodUNXb182Nm15d3JCSUo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjo2MA0G CSqGSIb3DQEBCwUAA4IBAQARYuN1/mvdJ6F+G1qO6a9N5PTOnqds1BKEg1AMKDxq TABcIFUM0np4AIhP/oxGUy6haYt3iVxxIDyJnN8eoDpnvIR3bv/U18pfXBMZAQ9o Rm4ITZ8txRaZZtzx5cPQ6DqNmbPtFic3g5S4vvp5s33wH4EVoaOXxv1XstQ6I8X0 v9xwHZVEBVwj92MHnOBhIJmlLQSOOec+BeuWQeawD+IznQsfueEjmkFlJ+6vtOpD s+TXjdVqBPgjX3DNZLZdyG7WCfCuB21efDY5ZB2KP4chVUqLwxDrf6h7/ZkrBII8 EAX6g46YjZ4kbJT13u13bv76g5LhCt9Zjyeujn8+dt/4 -----END CERTIFICATE-----Generated at Wed Jan 21 00:03:43 2026 by rpki-client